$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/055086c8-b061-37a3-8faa-2e7964a98237.roa File: 055086c8-b061-37a3-8faa-2e7964a98237.roa (raw, json) Hash identifier: AzMfOec7ZR8w/8AlZCwVtId/5104eUJ3hPheNDQe5hM= Subject key identifier: 72:27:57:66:FC:13:4C:07:AF:CE:D3:34:2F:D3:77:66:02:31:19:D0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285848BE861EE79149C5BADF65C480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/055086c8-b061-37a3-8faa-2e7964a98237.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 174 IP address blocks: 172.252.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:1e:e7:91:49:c5:ba:df:65:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=6b53cf08-ef63-4a55-8fd8-6df5da56a5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4e:3a:eb:c8:2e:be:62:fe:cd:24:01:45:d0: a0:2f:7a:ea:ca:de:33:76:f5:cf:6b:2a:86:c9:57: 92:96:ed:c3:15:8f:5a:4b:f7:8e:c0:67:51:35:6a: ae:f3:18:5c:47:c7:e0:3e:cc:9d:90:ef:10:b2:1d: 9f:b9:84:4e:6a:68:06:76:46:a6:1f:95:c8:25:ce: e3:a9:40:56:54:77:56:46:03:b1:e9:3b:3e:83:5f: e2:0c:88:6d:04:54:b9:ad:65:e9:e8:8c:e9:3b:9c: 91:ab:b4:d9:2c:e2:c1:43:77:4d:83:4c:18:c6:17: 8f:5d:95:b2:e4:c4:33:9b:36:3c:98:94:6f:d4:f8: 63:40:c0:4e:bf:d7:15:5c:3e:dd:ea:ad:93:d7:56: d8:2d:51:93:0c:e2:22:34:27:0a:ab:05:4a:bb:18: f5:6e:3f:b2:c5:15:1c:f7:97:cc:48:ed:19:00:c4: e7:cc:a5:7d:be:55:ab:55:1c:80:c6:fb:2f:44:17: 21:5c:57:cb:53:a7:93:97:26:37:93:05:96:cc:a5: 34:62:8f:22:aa:f7:21:d5:36:f6:0e:2c:81:7e:cd: d4:6c:a7:3c:62:b0:29:03:69:72:bc:2d:b6:6f:db: 45:18:a4:6c:e5:10:dd:4d:85:27:0d:0a:63:aa:1f: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:27:57:66:FC:13:4C:07:AF:CE:D3:34:2F:D3:77:66:02:31:19:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/055086c8-b061-37a3-8faa-2e7964a98237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:62:ac:53:10:ff:e3:95:48:3e:ab:5c:6a:dd:b8:90:de:a4: aa:16:4f:3a:02:11:9a:e6:7f:35:21:d1:d7:0f:c2:af:dd:ec: 51:2a:f0:cf:67:bf:64:d6:b9:f8:7d:66:92:74:5e:19:22:ec: e4:87:62:db:f7:45:54:b5:f9:b7:92:a6:66:5f:f3:d5:ee:47: 69:37:34:52:c1:e7:04:31:f8:37:aa:46:6b:9a:27:3e:19:2b: bb:b6:ac:9e:2c:9b:0f:d5:c0:bb:7a:4d:e3:e8:8a:ad:f7:98: 8b:f5:45:d5:0b:b0:dd:0c:4f:7c:b2:e7:e7:46:f6:51:bf:0a: db:d3:87:d3:b8:35:57:1e:e0:d9:97:2d:f3:0a:d6:3d:ff:92: df:60:7f:ca:a3:d0:97:81:16:9b:b9:0b:04:cd:8b:d8:d2:f8: 8a:3b:b4:d6:3a:7b:6a:52:cd:84:d9:3d:ad:33:6c:f8:44:e5: b3:2a:08:5a:43:dc:b9:35:08:6a:1d:d8:e4:b7:9d:1e:24:d1: b9:b4:35:e6:21:8f:e1:bc:18:67:6c:4f:4a:f6:36:95:16:53: 9e:f0:75:ad:31:62:81:5e:47:50:9c:6e:1a:98:88:7f:2b:39: ae:91:fa:ae:1f:2a:b9:e7:2d:c9:a3:1e:63:2f:6f:4e:ad:54: aa:52:6b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hh7nkUnFut9lxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NmI1M2NmMDgtZWY2My00YTU1LThmZDgtNmRmNWRhNTZhNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh04668guvmL+zSQBRdCgL3rqyt4zdvXPayqG yVeSlu3DFY9aS/eOwGdRNWqu8xhcR8fgPsydkO8Qsh2fuYROamgGdkamH5XIJc7j qUBWVHdWRgOx6Ts+g1/iDIhtBFS5rWXp6IzpO5yRq7TZLOLBQ3dNg0wYxhePXZWy 5MQzmzY8mJRv1PhjQMBOv9cVXD7d6q2T11bYLVGTDOIiNCcKqwVKuxj1bj+yxRUc 95fMSO0ZAMTnzKV9vlWrVRyAxvsvRBchXFfLU6eTlyY3kwWWzKU0Yo8iqvch1Tb2 DiyBfs3UbKc8YrApA2lyvC22b9tFGKRs5RDdTYUnDQpjqh/jlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHInV2b8E0wHr87TNC/Td2YCMRnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDU1MDg2YzgtYjA2MS0z N2EzLThmYWEtMmU3OTY0YTk4MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1irFMQ/+OVSD6rXGrduJDepKoWTzoCEZrmfzUh0dcPwq/d7FEq8M9n v2TWufh9ZpJ0Xhki7OSHYtv3RVS1+beSpmZf89XuR2k3NFLB5wQx+DeqRmuaJz4Z K7u2rJ4smw/VwLt6TePoiq33mIv1RdULsN0MT3yy5+dG9lG/CtvTh9O4NVce4NmX LfMK1j3/kt9gf8qj0JeBFpu5CwTNi9jS+Io7tNY6e2pSzYTZPa0zbPhE5bMqCFpD 3Lk1CGod2OS3nR4k0bm0NeYhj+G8GGdsT0r2NpUWU57wda0xYoFeR1CcbhqYiH8r Oa6R+q4fKrnnLcmjHmMvb06tVKpSa8k= -----END CERTIFICATE-----Generated at Fri Apr 11 22:54:35 2025 by rpki-client